collusion detection las vegas style - nist › csrc › media › publications › ... · collusion...
TRANSCRIPT
![Page 2: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/2.jpg)
Fraud Statistics
“ … employees steal approximately $400 billionfrom American businesses each year.”
U.S. Chamber of Commerce
![Page 3: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/3.jpg)
GAMING SCAMS
![Page 4: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/4.jpg)
Opportunists Converge!
![Page 5: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/5.jpg)
“Mini-light” Cheating Device
![Page 6: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/6.jpg)
Bill Validator Defect
![Page 7: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/7.jpg)
Roulette Past Posting
![Page 8: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/8.jpg)
Card Counting - 101
+1 -1 +1-1+1+1 -1 0
Card ValueCard Value CountCount2 - 6 +17 - 9 010,J,Q,K & Ace -1
![Page 9: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/9.jpg)
Card Counting Bet Strategy
$5$1,000
$5 $5
Count-2
Count+1
Count+4
Count+6
![Page 10: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/10.jpg)
Count Teams
![Page 11: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/11.jpg)
No Big Bets?
![Page 12: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/12.jpg)
The “Chip Cup”
![Page 13: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/13.jpg)
The “Cooler”
![Page 14: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/14.jpg)
Camera fits ina coat button.
Camera on the Game
![Page 15: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/15.jpg)
Camera on the Game
Button isattached to aman’s jacket.
![Page 16: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/16.jpg)
Camera on the Game
Strapped tothe man’s
body.
![Page 17: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/17.jpg)
Camera on the Game
Images aretransmitted to
a vehicle inparking lot.
![Page 18: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/18.jpg)
Camera on the Game
Slow motionvideo is used
to identifycard values.
![Page 19: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/19.jpg)
Camera on the Game
Player isradioed withknowledge of
next card.
![Page 20: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/20.jpg)
SURVEILLANCEINTELLIGENCE & FACIAL
RECOGNITION
(Griffin GOLD, another strategic SRD system)
![Page 21: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/21.jpg)
Surveillance
![Page 22: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/22.jpg)
Surveillance Room
![Page 23: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/23.jpg)
Griffin Investigations
World-widetracking,
investigations,and reporting of
countersand cheaters.
![Page 24: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/24.jpg)
![Page 25: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/25.jpg)
![Page 26: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/26.jpg)
![Page 27: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/27.jpg)
![Page 28: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/28.jpg)
![Page 29: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/29.jpg)
![Page 30: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/30.jpg)
Global Activity Monitoring(Griffin 2000)
Puerto Rico
![Page 31: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/31.jpg)
Game Integrity Protection
• Hiring standards
• Policies and procedures
• Training
• Surveillance/Security
• Shared intelligence
• Internal audits
• Background check updates
![Page 32: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/32.jpg)
COLLUSION DETECTION
![Page 33: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/33.jpg)
“Collusion”
“A secret agreement for fraudulent or illegalpurpose; conspiracy.”
Webster’s New World College Dictionary
![Page 34: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/34.jpg)
Consolidated Database
Desired Entities Undesired Entities
Applicants
Employees
Vendors
Customers
Prospects
Griffin Subjects
Incidents
Organized CrimeDigest
Black Book
Intelligence
![Page 35: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/35.jpg)
Entity Relationships
Desired Entities Undesired Entities
Applicants
Employees
Vendors
Customers
Prospects
Known Cheaters
Incidents
Organized CrimeDigest
Black Book
Intelligence
![Page 36: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/36.jpg)
Rule-Based Alert Reporting
ALERT ALERT RULE #1RULE #1
Employee relationships
to undesirableentities
Collusion?Collusion?Marc Nelson (Arrested cheater)Sue Brinkley (Roulette dealer)
Share same phone number!
![Page 37: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/37.jpg)
Rule-Based Alert Reporting
ALERT ALERT RULE #2RULE #2
Employee relationships between cash
handlers and security
Collusion?Collusion?Brenda Delayne (Surveillance)Kevin Oswald (Softcount)
Shared residence June 92 - May 95!
![Page 38: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/38.jpg)
Rule-Based Alert Reporting
ALERT ALERT RULE #3RULE #3
Different employees
determined as the same
Fraud?Fraud?Jose Galvin Jr. (Cook)Victor J. Galvin (Dishwasher)V. J. Galvinger (Food Server)
Share same tax ID, address, and phone!
![Page 39: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/39.jpg)
Rule-Based Alert Reporting
ALERT ALERT RULE #4RULE #4
Vendorrelationshipsto supervisor or higher level
employee
Collusion?Collusion?Kirk Preston (A/P Manager)Acme Paper ($1.2M Contract)
Acme contact was a reference on Kirk’s application!
![Page 40: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/40.jpg)
METHODOLOGY
![Page 41: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/41.jpg)
Collusion Analysis Processing
Address Hygiene
Consolidated EntityDatabase
Name Standardization
Data Quality/Enhancement
Match
Merge
HRSystems
A/PSystems
SalesSystems
ExternalSystems
Arrests/Incidents
![Page 42: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/42.jpg)
Address Hygiene NodeAddress Standardization
460 Oak StreetMill Valley, Ca 94914
460 South Oak AveMill Valley, Ca 94941
4737 Simeron DriveEaston, Ma 02334
4737 Cimarron DriveEaston, Ma 02334
![Page 43: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/43.jpg)
Data Quality NodeName Standardization
Ruhullah, Ruh-ul-Amin, Ruh-ul-Haqq,Ruhul Qudus
Ruh
Dick, Dickie, Ricardo,Rich, Richie, Rick,Rickey, Ricki, Rickie,Ricky, Rikki, Ritchie
Richard
![Page 44: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/44.jpg)
Data Quality NodeFormatting Standards
(602) 731-13707074121234
557-672061
897656
(602) 731-1370(707) 412-1234
557-67-2061
000897656
![Page 45: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/45.jpg)
Data Quality NodeParsing Standards
Alexander, Mark A. Jr. PHD
Last Name = AlexanderFirst Name = MarkMiddle Name = A
Generation = JrSuffix = PHD
![Page 46: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/46.jpg)
Data Quality NodeQuality Standards
Phone Numbers(213) 543-(800) 555-1212(000) 000-0000
Last Names^%@$U
Rejected (Length)Rejected (Generic)Rejected (Invalid)
Rejected (Symbols)Reject?
![Page 47: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/47.jpg)
Data Quality NodeArea Code Splits
Area Code Split(702) (702)
(775)
Area Code Correction(702) 746-1052 (775) 746-1052
![Page 48: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/48.jpg)
Data Quality NodeData Source Confidence
PayrollSystem
A/PSystem
HotelResrv
NCOAArrests/Incidents
9.1 8.8 6.5 7.6 9.8
Confidence Scale 1-10
![Page 49: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/49.jpg)
Match/Merge NodeRelationship Testing
Step 1. Step 1. Locate Locate
Possible Possible MatchesMatches
Step 2. Step 2. Confidence Confidence EvaluationEvaluation
MatchesMatches
RelationshipsRelationships
![Page 50: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/50.jpg)
Match/Merge NodeConfidence Evaluation
Robert I. Ashley Jr.
1024 MexcalLas Vegas, Nv. 89110132-42-1776(702) 401-0008
“Known Felon”
Bob Ashley
1024 Mescal WayLas Vegas, Nv. 89110133-42-1776(707) 459-5678
“Employee Address Change”
![Page 51: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/51.jpg)
Database Architecture
Entity ID# 00034256
NamesNamesSue LoudinSusan Fran MillerSue Miller-Loudin
AddressesAddresses460 S. Oak Ave.4737 Cimarron Dr.POB 174541101 Princeton #31
NumbersNumbers(702) 555-2091(916) 342-6721012-34-56785021 1111 2391 1231
RelationsRelationsSpouse: John LoudinRef : Mary MillerRef: Jason MillerRef: Kelly Jones
![Page 52: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/52.jpg)
EXTERNAL DATAENHANCEMENT
![Page 53: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/53.jpg)
External Data Enhancment
Address Hygiene
HumanResources
AccountsPayable
Trans.Data
Arrests &Incidents
Consolidated EntityDatabase
Name Standardization
Data Quality/Enhancement
Match
Merge
ExternalData
![Page 54: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/54.jpg)
External Data Enhancement
• Last 10 years of addresses• Address latitude/longitude• Aliases• Phone number• Date of birth• Social Security Number• Property ownership• Bankruptcies• Lifestyle indicators (Income, purchasing power, etc.)
![Page 55: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/55.jpg)
RESULTS ...
![Page 56: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/56.jpg)
AlertReporting
INTELLIGENCE REPORTWednesday, July 19, 2000
Mark SmithFor your eyes only
SUMMARY OF FINDINGS …
Information received July 13, 2000 thatKelly Smith, an agency accountspayable employee, may have arelationship to ACME Chemical, anagency vendor.
SOURCE DATA OF FINDINGS …
Kelly Smith has been employed sinceDecember 1998 at the agency in theposition of “Accounts PayableManager”. Agency human resourcerecords indicate her emergencycontact’s residential phone number is(702) 892-0987, identical with listedbusiness phone number of ACMEChemical.
Kelly Smith, Employee #30203Emergency Contact: Tony Smith(702) 892-0987
ACME Chemical, Vendor #84-961452(702) 892-0987
RECOMMENDED ACTION …
Based on the above informationindicating a possible relationshipbetween Smith and ACME Chemical itis recommended that an appropriateinvestigation should be conducteddetermining the principals in ACMEChemical and relationships, if any,between the principals and Smith.
![Page 57: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/57.jpg)
Collusion Testingat a Large US Retailer
• Extent of Analysis– 800,000+ employees including emergency contact
information– Vendors including up to 8 alternate addresses– Arrests
• Findings– 564 Employee who have vendor or criminal
relationships– 26 Employees who are vendors
![Page 58: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/58.jpg)
Collusion Testingat a Major Strip Casino
• Extent of Analysis– 20,000+ employees (current and terminated)– All vendors– All slot club and table games rated players– In-house arrests/incidents database– Griffin database
• Findings– 24 active players were known Griffin subjects– 23 players had relationships to prior arrests/incidents– 12 employees were themselves the player– 192 employees had possible vendor relationships– 7 employees were the vendor
![Page 59: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/59.jpg)
Federal Agency Findings(during a 3 day pilot)
• Extent of Analysis– 20,000+ employees (current & Northeast only)– 75,000+ vendors– 400,000+ security risk entities
• Findings– 140 employee relationships to vendors– 1451 vendor relationships to security risks– 253 employee relationships to security risks
entities– 2 vendors were the security concern– “n” employees were the security risk/vendor
![Page 60: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/60.jpg)
TOO LATE!
![Page 61: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/61.jpg)
NEAR REAL-TIME DATAWAREHOUSING & ALERT
ESCALATION
![Page 62: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/62.jpg)
Near Real-Time Analysis
Address Hygiene
HRSystem
A/PSystem
TransSystem
MktngSystem
IncidentSystem
Name Standardization
Data Quality/Enhancement
Match
Merge
ALERTS
(<8 seconds to page!!!)
![Page 63: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/63.jpg)
Data Warehousing StyleArchitecture
MessageRegistration
AddressHygiene
Data QualityManagement
Match/Merge
Enterprise-wide Data Warehouse
MasterFiles &Config.
Message Log
IN
SourceSystems
Administration
![Page 64: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/64.jpg)
Data Warehousing StyleArchitecture
AddressHygiene
Data QualityManagement
Match/Merge
Consolidated Entity Database
HRSystem
A/PSystem
HotelSystem
NCOAArrestsSystem
CollectionNode
AddressHygiene
Data QualityManagement
Match/Merge
CollectionNode
AddressHygiene
Data QualityManagement
Match/Merge
CollectionNode
AddressHygiene
Data QualityManagement
Match/Merge
CollectionNode
AddressHygiene
Data QualityManagement
Match/Merge
CollectionNode
![Page 65: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/65.jpg)
System Integration
Source Systems
![Page 66: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/66.jpg)
Serious Dependencies
Source Systems
![Page 67: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/67.jpg)
Central Messaging Engine(CME)
PIPELINE
(Universal MessageFormats)
SourceSystems
NODE
NODE
NODE
NODE
NODE
NODE
NODE
NODE
SourceSystems
![Page 68: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/68.jpg)
CME Routing Rules
PIPELINE
(Universal MessageFormats)
SourceSystems
NODE
NODE
NODE
NODE
NODE
NODE
NODE
NODE
SourceSystems
![Page 69: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/69.jpg)
Near Real-time Warehouse
MessageRegistration
AddressHygiene
Data QualityManagement
Match/Merge
Enterprise-wideWarehouse
IN
PIPELINE
(Universal MessageFormats)
SourceSystems
NODE
NODE
NODE
NODE
![Page 70: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/70.jpg)
Near Real-time Alert Escalation
MessageRegistration
AddressHygiene
Data QualityManagement
Match/Merge
IN
PIPELINE
(Universal MessageFormats)
SourceSystems
NODE
NODE
NODE
NODE !!!
![Page 71: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/71.jpg)
FINAL THOUGHTS
![Page 72: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/72.jpg)
Special Considerations
• Size of data set changes tuning– Match/merge rules
– Proximity derived relations (latitude/longitude)
• Adjust alert rules for creating of actionableoutput
![Page 73: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/73.jpg)
Critical Success Factors
• Always load the good guys and the bad guys• Need rich data sets
– e.g. Emergency contacts, employment references
• Need volumes of data– Small entity data sets have limited returns
• Use data enhancement techniques for militarygrade results– e.g. address histories, latitude/longitude, bankruptcies,
lifestyle indicators, etc.
![Page 74: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/74.jpg)
what might you find?
![Page 75: Collusion Detection Las Vegas Style - NIST › csrc › media › publications › ... · Collusion Detection Las Vegas Style Jeff Jonas President Systems Research & Development](https://reader033.vdocuments.us/reader033/viewer/2022060315/5f0bd3b67e708231d432680e/html5/thumbnails/75.jpg)
QUESTIONS?